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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings, of claims in the application: 



Listing of Claims: 

1 . (Currently Amended) A method for performing network address translations for a 
session in a network, the network including at least one local network domain, the local network 
domain including at least one computer system, each of the at least one computer system having 
a local address and being associated with a global address, the session exchanging a plurality of 
packets that travel to and from a second at least one computer system within the network, each of 
the second at least one computer system being connected to the network outside of the local 
network domain, each of the plurality of packets including source information and destination 
information, the method comprising the steps of: 

(a) searching a global address table for a match of a key for each of the plurality of 

packets to determine a direction of travel for each of the plurality of packets, the key being 
provided using a portion of the destination information, the global address table including at least 
one entry, each of the at least one entry corresponding to the global address for a first 
corresponding computer system; and 

(b) asymmetrically translating the source information and destination information for 

each of the plurality of packets using an address translation table or session table based on a 
direction the packet is traveling, the address translation table including at least one entry, each of 
the at least one entry corresponding to the local address for a first at least one computer system 
within the at least one local network domain of the network, the session table including at least 
one session table entry, each of the at least one session table entry corresponding to a specific 
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connection between two computer systems , the asymmetric translating including providing a 
symmetric key for indexing a session table, the symmetric key being symmetric for bi-directional 
traffic . 

2. (Currently Amended) The method of claim 1, wherein the asymmetrically translating 
step (b)-further includes the steps of: 

— determining that the direction the packet is traveling is inbound if an exact match 
is found while searching the global address table, and determining that the direction the packet is 
traveling is outbound if the exact match is not found while searching the global address table. 

3. (Currently Amended) The method of claim 1 wherein the direction of travel can be 
inbound or outbound and wherein the asymmetrically translating step (b)-further includes the 
steps of: 

(W) — translating the source information using the address translation table if the packet 
is outbound; and 

(b3) — translating the destination information using the session table if the packet is 
inbound. 

4. (Currently Amended) The method of claim 1 wherein at least one global port is 
associated with the network beyond the local network domain and at least one local port is 
associated with the local network domain connecting the first at least one computer system to the 
network, and wherein asymmetrically translating the source information and destination 
information in step (b)-further includes the steps of: 
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(b±3 — if the full match is found, transposing the destination information with the source 
information, providing [[a]]the symmetric key using transposed source and destination 
information, using the symmetric key to search [[a]]the session table and then performing 
network address translation using session table data; and 

(b2) — if the full match is not found, searching the address translation table using the 
source information, performing the network address translation using address translation table 
data, providing the symmetric key from translated source parameters, and using the symmetric 
key to search the session table. 

5. (Currently Amended) The method of claim 1 further including the steps of: 

(e4-) utilizing the symmetric key to access an entry for the session in the session table. 

6. (Original) The method of claim 5 wherein the session table has a single entry per 
session. 

7. (Original) The method of claim 1 wherein the first at least one computer system is a 

server. 

8. (Original) The method of claim 6, wherein the server is partitioned into multiple 
logical servers, each of which has a different global network address. 

9. (Currently Amended) The method of claim 1 wherein at least one global port is 
associated with the network beyond the local network domain, and at least one local port is 
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associated with the local network domain connecting the first at least on computers system to the 
network and wherein asymmetrically translating the source information and destination 
information in step (b)-further includes the steps of: 

(W} — if the full match is found, providing a symmetric key using a symmetric function, 
using the symmetric key to search [[a]] the session table and then performing network address 
translation using session table data; and 

(b3) — if the full match is not found, searching the address translation table using the 
source information, performing the network address translation using address translation table 
data, providing the symmetric key using the symmetric function and using the symmetric key 
from translated source parameters to search the session table. 

10. (Currently Amended) A system for performing network address translations for a 
session in a network, the network including at least one local network domain, the local network 
domain including at least one computer system, each of the at least one computer system having 
a local address and being associated with a global address, the session exchanging a plurality of 
packets that travel to and from a second at least one computer system within the network, each of 
the second at least one computer system being connected to the network outside of the local 
network domain, each of the plurality of packets including source information and destination 
information, the system comprising: 

a memory for storing an address translation table, a global address table and a session 
table, the address translation table including at least one entry, the address translation table 
including at least one entry, each of the at least one entry corresponding to the local address for a 
first corresponding computer system within the at least one local network domain of the network, 
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the session table including at least one session table entry, each of the at least one session table 
entry corresponding to a specific connection between two computer systems, the global address 
table including at least one entry, each of the at least one entry corresponding to the global 
address for a first at least one corresponding computer system; and 

a processor for searching the global address table for a full match of a key for each of the 
plurality of packets, the key being provided using a portion of the source destination information, 
the processor also for asymmetrically translating the source information and destination 
information for each of the plurality of packets using the address translation table or a session 
table based on a direction the packet is traveling , the asymmetric translating including the 
processor providing a symmetric key for indexing a session table, the symmetric key being 
symmetric for bi-directional traffic . 

11. (Original) The system of claim 10, wherein the processor asymmetrically translates 
the source information by determining that the direction the packet is traveling is inbound if an 
exact match is found while searching the global address table, and determining that the direction 
the packet is traveling is outbound if the exact match is not found while searching the global 
address table. 

12. (Original) The method of claim 1 wherein the direction of travel can be inbound or 
outbound and wherein the processor asymmetrically translates the source information by 
translating the source information using the address translation table if the packet is outbound 
and translates the destination information using the session table if the packet is inbound. 
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13. (Original) The system of claim 1 1 wherein the computer system wherein the session 
table is indexed using the symmetric key and wherein the processor identifies the session 
utilizing the symmetric key to access an entry for the session in the session. 

14. (Original) The system of claim 13 wherein the session table has a single entry per 

session. 

15. (Currently Amended) The system of claim 10 wherein at least one global port is 
associated with the network beyond the local network domain and at least one local port is 
associated with the local network domain connecting the first at least one computer system to the 
network, and wherein if the full match is found, the processor provides a symmetric key using a 
symmetric function, uses the symmetric key to search [[a]]the session table and then performs 
network address translation using session table data; and 

wherein if the full match is not found, the processor searches the address translation table 
using the source information, performs the network address translation using address translation 
table data, provides the symmetric key from translated source parameters, and uses the symmetric 
key to search the session table. 

16. (Original) The system of claim 10 wherein the first at least one computer system is a 

server. 

17. (Original) The system of claim 16, wherein the server is partitioned into multiple 
logical servers, each of which has a different global network address. 
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18. (Currently Amended) A computer-readable medium containing a program for 
performing network address translations for a session in a network, the network including at least 
one local network domain, the local network domain including at least one computer system, 
each of the at least one computer system having a local address and being associated with a 
global address, the session exchanging a plurality of packets that travel to and from a second at 
least one computer system within the network, each of the second at least one computer system 
being connected to the network outside of the local network domain, each of the plurality of 
packets including source information and destination information, the program including 
instructions for: 

(a) searching a global address table for a match of a key for each of the plurality of 

packets to determine a direction of travel for each of the plurality of packets, the key being 
provided using a portion of the destination information, the global address table including at least 
one entry, each of the at least one entry corresponding to the global address for a first 
corresponding computer system; and 

(b) asymmetrically translating the source information and destination information for 

each of the plurality of packets using an address translation table or session table based on a 
direction the packet is traveling, the address translation table including at least one entry, each of 
the at least one entry corresponding to the local address for a first corresponding computer 
system within the at least one local network domain of the network, the session table including at 
least one entry, each of the at least one entry corresponding to a specific connection between two 
computer systems , the asymmetric translating including providing a symmetric key for indexing 
a session table, the symmetric key being symmetric for bi-directional traffic . 
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19. (Currently Amended) The computer-readable medium of claim 18, wherein the 
asymmetrically translating instructions (b)-further includes instructions for: 

— determining that the direction the packet is traveling is inbound if an exact match 
is found while searching the global address table, and determining that the direction the packet is 
traveling is outbound if the exact match is not found while searching the global address table. 

20. (Currently Amended) The computer-readable medium of claim 18 wherein the 
direction of travel can be inbound or outbound and wherein the asymmetrically translating 
instructions (b)-further includes instructions for: 

— translating the source information using the address translation table if the packet 
is outbound; and 

(b2) — translating the destination information using the session table if the packet is 
inbound. 

21. (Currently Amended) The computer-readable medium of claim 18 wherein at least 
one global port is associated with the network beyond the local network domain and at least one 
local port is associated with the local network domain connecting the first at least one computer 
system to the network, and wherein asymmetrically translating the source information and 
destination information in instructions (^-further includes instructions for: 

(W) — if the full match is found, transposing the destination information with the source 
information, providing a symmetric key using transposed source and destination information, 
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using the symmetric key to search [[a]]the session table and then performing network address 
translation using session table data; and 

(b2) — if the full match is not found, searching the address translation table using the 
source information, performing the network address translation using address translation table 
data, providing the symmetric key from translated source parameters, and using the symmetric 
key to search the session table. 

22. (Currently Amended) The computer-readable medium of claim 18 wherein the 
program further includes instructions for: 

(e) utilizing the symmetric key to access an entry for the session in the session table. 

23. (Original) The computer-readable medium of claim 22 wherein the session table has 
a single entry per session. 

24. (Original) The computer-readable medium of claim 1 8 wherein the first at least one 
computer system is a server. 

25. (Original) The computer-readable medium of claim 24, wherein the server is 
partitioned into multiple logical servers, each of which has a different global network address. 

26. (Currently Amended) The computer-readable medium of claim 1 8 wherein at least 
one global port is associated with the network beyond the local network domain, and at least one 
local port is associated with the local network domain connecting the first at least on computers 
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system to the network and wherein asymmetrically translating the source information and 
destination information in instructions (b)-further includes instructions for: 

(W} — if the full match is found, providing [[a]]the symmetric key using a symmetric 
function, using the symmetric key to search a session table and then performing network address 
translation using session table data; and 

(b3) — if the full match is not found, searching the address translation table using the 
source information, performing the network address translation using address translation table 
data, providing the symmetric key using the symmetric function and using the symmetric key 
from translated source parameters to search the session table. 
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